bb91fb05c092378b2fff43a5d640d25155d17b07a77b4272da549a048d22d3b6

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 09:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
karing_1.2.18.2102_windows_x64.exe
Size 43.6MB
Sample260511-ltdycsev3x
SHA256 bb91fb05c092378b2fff43a5d640d25155d17b07a77b4272da549a048d22d3b6
MD5 8c05d4a53f85830a35b05400b9cf1a3a
SHA1 e4d95fa3eadf4db983a810564f6d9a3f5a934193
SHA512 bdc5325c605a255a8d011dbf01c7a63b4220a002477c84fd349ec22335487e4d1cfb6738f9d070c6e69634cb15a542699b231f6f35b95fb0e8d84e2d32880fb7
SSDEEP 786432:7ZwhMhf0MgSY3df+km6jZKUtRluCETmClKc4+L4Q8VPUlNeOMi7SnUav1NDsUJQR:72Cl0MgPB+Tc8UtRluCiL4rlOt7fcDsl
TLSH
T1A8A73312F28D623DE86A553F0472A904793BFE14694F4C6357A82D59CE3A0E12DBFB43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
2784	karing_1.2.18.2102_windows_x64.tmp
3940	karing.exe
1684	crashpad_handler.exe

Loads dropped DLL 27 IoCs

pid	Process
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
3940	karing.exe
1684	crashpad_handler.exe
1684	crashpad_handler.exe
1684	crashpad_handler.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Karing\api-ms-win-core-memory-l1-1-0.dll	karing_1.2.18.2102_windows_x64.tmp
File opened for modification	C:\Program Files\Karing\flutter_windows.dll	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\is-KJ0VE.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geoip\is-6DH65.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-VTD4G.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-PJHBE.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-9TL86.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-6HKD9.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-A8E8C.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-72CNK.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-ACPDG.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-JCNPR.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\is-9ASJV.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\is-E84UQ.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\acl\is-KLE7Q.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\countries\is-G9FA1.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\acl\is-S9BUI.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geoip\is-AC4HK.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-7FB5I.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-BTKLV.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-FLA4P.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-LM934.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geoip\is-U649P.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-CUJ12.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-16GMG.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\countries\is-CETCU.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\countries\is-VDHA5.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-0BJ0L.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-JHIBQ.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-MPOR2.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-FRSC8.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-EMSUM.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-H0JKA.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\countries\is-69TED.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\countries\is-43FLD.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\acl\is-QS5F2.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geoip\is-JHGJT.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-00O5S.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-2LI9I.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-5GP1U.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-I59R9.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-ATC29.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-TOU5J.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-EI7D5.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-R1C39.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-TKHMM.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-LSEBS.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-IFVQ7.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\is-QE81E.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geoip\is-2MSTP.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-RBLVP.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-L9P6P.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-LH9BG.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geoip\is-GEN3O.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-NSK13.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-LFDMH.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-U4ARM.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-AUO9E.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-FAL8F.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-78VPU.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\countries\is-VIAQM.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\acl\is-6GUEL.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geoip\is-3T1KT.tmp	karing_1.2.18.2102_windows_x64.tmp
File created	C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-NUQ17.tmp	karing_1.2.18.2102_windows_x64.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	karing_1.2.18.2102_windows_x64.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	karing_1.2.18.2102_windows_x64.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral2/memory/1180-0-0x0000000000CE0000-0x0000000000DE8000-memory.dmp	innosetup
behavioral2/memory/1180-7-0x0000000000CE0000-0x0000000000DE8000-memory.dmp	innosetup
behavioral2/memory/1180-5716-0x0000000000CE0000-0x0000000000DE8000-memory.dmp	innosetup

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\karing	karing.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\karing\URL Protocol	karing.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\karing\shell\open\command	karing.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\karing\shell	karing.exe
Key created	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\karing\shell\open	karing.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000_Classes\karing\shell\open\command\ = "C:\\Program Files\\Karing\\karing.exe \"%1\""	karing.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2784	karing_1.2.18.2102_windows_x64.tmp
2784	karing_1.2.18.2102_windows_x64.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2784	karing_1.2.18.2102_windows_x64.tmp

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1180 wrote to memory of 2784	1180	karing_1.2.18.2102_windows_x64.exe	80
PID 2784 wrote to memory of 3940	2784	karing_1.2.18.2102_windows_x64.tmp	82

C:\Users\Admin\AppData\Local\Temp\karing_1.2.18.2102_windows_x64.exe
"C:\Users\Admin\AppData\Local\Temp\karing_1.2.18.2102_windows_x64.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1180
- C:\Users\Admin\AppData\Local\Temp\is-QBUBD.tmp\karing_1.2.18.2102_windows_x64.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-QBUBD.tmp\karing_1.2.18.2102_windows_x64.tmp" /SL5="$502DC,44414700,1019904,C:\Users\Admin\AppData\Local\Temp\karing_1.2.18.2102_windows_x64.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2784
- - C:\Program Files\Karing\karing.exe
    "C:\Program Files\Karing\\karing.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    PID:3940
  - - C:\Program Files\Karing\crashpad_handler.exe
      "C:\Program Files\Karing\crashpad_handler.exe" --no-rate-limit "--database=C:\Program Files\Karing\.sentry-native" "--metrics-dir=C:\Program Files\Karing\.sentry-native" --url=https://o4508911573663744.ingest.sentry.io:443/api/4508911606431744/minidump/?sentry_client=sentry.native.flutter/0.13.2&sentry_key=eb685fe432f34cbc0305cfd60120a79d "--attachment=C:\Program Files\Karing\.sentry-native\83a7d134-75a3-414d-6bd5-287251b9079e.run\__sentry-event" "--attachment=C:\Program Files\Karing\.sentry-native\83a7d134-75a3-414d-6bd5-287251b9079e.run\__sentry-breadcrumb1" "--attachment=C:\Program Files\Karing\.sentry-native\83a7d134-75a3-414d-6bd5-287251b9079e.run\__sentry-breadcrumb2" --report-id=acb59fa8-35a5-48cb-f4a1-626589bd742d --initial-client-data=0x65c,0x660,0x664,0x648,0x668,0x7fff6edc6430,0x7fff6edc6450,0x7fff6edc6468
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1684

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:3188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

WebView2Loader.dll

Path C:\Program Files\Karing\WebView2Loader.dll
Size 162KB
SHA256 1d963a02d8a7fa3e7eac2e936dad5559c4d63327f35b0a09787ffc1d58f9c18d
MD5 0ad9319fa14d39c0812583337546ca20
SHA1 0a76b27dc44f46756984a7a5f93f9a9b024aedb5
SHA512 01bfb6516ea8d2347863fdf6de7ce1bc598d0798a7a388a0b4478a8be4bad66362185f366ed52adb19008f518c05fbaedf46268051bbf26e448e23b017af669f
SSDEEP 3072:RbAne8TlTRTSpL1ThTNTRyMDjRb/hy75HGRtVBviiZsZ5AalCPTOCEtJxWPg8EhJ:RbyTlTRTUL1ThTNTRyeLq1GRtVBvPZsd
TLSH
T1FDF36C5776E8007BE06B8274C9A34A11E777B4510760ABEF03A447791F23BD4AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

build_info_windows_plugin.dll

Path C:\Program Files\Karing\build_info_windows_plugin.dll
Size 84KB
SHA256 5e00915f4481ce51bfd6c1848ae65e34a77d10df24aea0048273232bf4eecde1
MD5 8ad5c69d896bc54844c3957d7ec44815
SHA1 a67e4f78e812250c63c299cc78fb58e1ff224f70
SHA512 8e10d8cdef388a1b5c727e5db8dcd4467b84c6344fe87375d6c452348656256349eb5a74dba917fa3f5354fd8b3ca77ea7a326674b6d31c44cf4e66139d2f478
SSDEEP 1536:9ZV1A8KWoribDb2FXqEy9d6rjM8FoltOeJuo:ZUWkibDb2FdjM8FoltO
TLSH
T156830A26FA2950ABE21AD4B8CA534D01DB72FC86579197CF57900EDB0E6BFE40E3E501
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

connectivity_plus_plugin.dll

Path C:\Program Files\Karing\connectivity_plus_plugin.dll
Size 96KB
SHA256 baf679f6e51e2ad268f9a3458207f8331be7975aca95f5c3c82c5535e18a6aa4
MD5 04ade3e057519315efb8a5a787e6536c
SHA1 0436c515effa10e20c350bbd96e67931864a612b
SHA512 ac90d18045db13786091727e53794be9f9d5e2eb151831ed3716e500e7e6b3ef133024f67b17ca238b81e8a3fbdb4d19fc9d3b78b1465c2ffff21665652841d3
SSDEEP 1536:VNKIMHhKkEvsZniNCLII0hARe82EaZDeY2AEMAfCYZUdbI6:VT0ZniNCoZD6TMAfCYZAb
TLSH
T165A3192AFA29406FE21AD4BCC9574E02CB72B8D5476167CB6B810EDB0F17BE54E3E510
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashpad_handler.exe

Path C:\Program Files\Karing\crashpad_handler.exe
Size 657KB
SHA256 c4dc00b8fc44201cbd454d834a314e1ed500de67a3bc3912e13bdca5739f626e
MD5 b716164b2c393347a0dfd0a5b26688de
SHA1 eb14992b8c70d39d406c55bcecd4e833d58227ce
SHA512 6e767f3ca1e9e91ebadfbcc02c2bf666799726808d642eb7f07fa1ebcdc5582066b004aae8d661958f549a9f543cfc08ab8d091dea82f02d72dec58c354aaf3c
SSDEEP 12288:64qVXjw3BtEx3AOtSkJZkY1lW21s8lz0j5+WTZO3NAx+HrxuOd7ZzaeTKaDW4+:64qV6BtEZtSkLkY171Fz0j5+WTZO3NAP
TLSH
T1CFE45B2AB27850BDD2B7C0B9DB528D03F7B2740B43B16ADB279146A61F179C84F39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-9GEF2.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-9GEF2.tmp
Size 89B
SHA256 9c406a17dc9fdcabaaaf07c814bb67107a2450a8e1416b9693e2608ea7a7cf52
MD5 5bdee3aa436b89bd0fc7c5b813665e97
SHA1 49bfb9b7ad4a593fcb3d64bf72dc63a848ee064a
SHA512 f828b0d4976aec6c5e9fe37a467e838b2c9c8e7568e28f49be84a10b89c48511211ba01c767846f7897b2aa281929b8ed912b7c41b1786ad6702f49c2f10dd7d
TLSH
T1B4B012CAF7A823DE4BC180729F19004330B95687894625C0F805D080DC0F24805D390E
MD5 SHA1 SHA512 TLSH

Submit Download

is-9MIMC.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-9MIMC.tmp
Size 326KB
SHA256 9f45098281eeec6a48017c4a31dd2dac06dc6e86a368c713dbd1d849195dfafc
MD5 5c15a2ca341bd2da151718fae8926a6e
SHA1 b9cec4b5994458680cf21adc26c69ad9d0b4cda8
SHA512 3a4ed840a69559b26b7e12950b8785ced45619760bdc82af0333a9375db3944f4ed86b8ca28c71ef3cd2d31b0e38825fb32b5d87b5fb93e35a22e068550f503a
SSDEEP 6144:Z8faklQg1RGrHPT/txRAx2GBSWU9XTjr/A5YL48jlg2vztbVJ:ZOT5GrvT3+QGQ9D//ASUkG2vzt5J
TLSH
T1D26423DB6A8498588D93E0CD9C60045986E148A7A97DE3DCDF0E34ED3DAD2FE015C7B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-DLHPL.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-DLHPL.tmp
Size 93B
SHA256 70a65cc343c0ec1d916cb5209dd7e1bc6f8552f4b236e28c4ea2d1b7e9888731
MD5 9432fed738312a571fcd81a8ac36352f
SHA1 59c4d1c7831892bfa59dd5f5fc047097db26ea1d
SHA512 9a471f30327b20bb01222b00147e415e1c31cbeba118da1021eea67cf61a6c4315481950c64ce29b39fcdace307710c14dc26bfea5f35fcec532915261d056c6
TLSH
T1BBB01224D178902F4F10C0407BE8114D5155620BDFB7A01305000204440C451591109B
MD5 SHA1 SHA512 TLSH

Submit Download

is-HCGM2.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-HCGM2.tmp
Size 283B
SHA256 ea295c06e2ad4e77dbda608fd05f06a07babecd44de39abf9aea751f5d5f2aa5
MD5 e14b3393f135aaa206cc3941f9804854
SHA1 2a147986c6b7f9744fbfa88d8ec825322c517bb9
SHA512 203e2786f23f381bc9ad0b1ab32596b26fed7f9ead0dedf55571b8b557c02d4580a5d4ecb1b71f618a76c9016e8a50d7b049a467fa014040b3d6faf84b725e44
TLSH
T18BD0EBF43902880A26720EF00A0D31C7300D6BE3BB031A8A82ABCA9880DDE01038C0FE
MD5 SHA1 SHA512 TLSH

Submit Download

is-I86LC.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-I86LC.tmp
Size 47B
SHA256 2d2f8473b1f4ab0b959e9cd912ce871b504dcb2ae43a5b1abdc3ce884380c209
MD5 6b10eb93bf343dcb1e00772579104c9c
SHA1 9dce7e3c31f8fa866b2e990034d2c8f10c680916
SHA512 63c86107ab8b2efe9b19e476b7ebdba8bbba955e43fb5780c49a690f704653079bfdec155e4fb00f28da1534ee0cd654ff230778608d421204581b1897debfef
MD5 SHA1 SHA512

Submit Download

is-KKHR1.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-KKHR1.tmp
Size 99B
SHA256 cda34f258bca8fb8d258c5c4623e517cff9029e8acc4a925bc13fea371dec52d
MD5 29b2529818b4c3e6049886b6f39a06fe
SHA1 f2a937577235dd9ec0d70baaf5f09fd89e3fed91
SHA512 10cd00652136e85d741587e9ddef3200b2e74415491d89c1cbd7b81dc8cf3d0898f7a8b64e7fcdd8eafbc4c256df1b24ee4698ea8a01f731c54ad9e66e1cf081
TLSH
T109B0126072F42110440F5899F265704E200683D03443DD665046133C19874852C1C209
MD5 SHA1 SHA512 TLSH

Submit Download

is-LGU9T.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-LGU9T.tmp
Size 190B
SHA256 5e24881a94eb6dcece44ff631be3a9c9bf018ef59a7c5de2eaf3dbb95d802b36
MD5 17ef90f3757a03b6b9e975a96b100866
SHA1 7a0f33a812ea85289b6e26bdbcc917be76ba8190
SHA512 36a0a6ed6618233dc2fe6430eac2cf3590ae9bedf11295db3be7eb6dae0ed6c1e5b197d732eccbbd9ec16e137fbc9a4b3e6391419fef07b22ecb1170b0e4fc29
TLSH
T11CC0C024CE45C2C71BD2CC13C0EC54D0433C9F00E0EBB70D00D2C1CC204D3109519C68
MD5 SHA1 SHA512 TLSH

Submit Download

is-MF8R4.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-MF8R4.tmp
Size 54B
SHA256 00015bd8da2f5b4fb292cb77cdf29e5bd82fe00b3ea084a87abfd45b7ab073d7
MD5 1d1459b0e8533118d17a42a1d919a0ce
SHA1 fe48e6f169bdc90cee5f123c2f8b8feb01941acc
SHA512 e5428d96760eb32c1f27334df0f0bf9df3653c862d0741aadcf2ab2d127080d9e89000774e9d81426326b5fe7a137f3ebf15408d0c86bf95bb9feaef5d7225a7
TLSH
T1AA900252919AC4479A1195392DD254840115DB0249935C19751945D5725A0008487024
MD5 SHA1 SHA512 TLSH

Submit Download

is-MPOR2.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-MPOR2.tmp
Size 386B
SHA256 2481affb18f4b328aa406f2b9f8f52662b192bba3195e073541597936a9a4bbe
MD5 a9973803d361391d83daeaf4b53fec04
SHA1 035a89902c9b9b8660b49f5e1e89b47693824c5d
SHA512 9ee71136e6690edb1def47055b2e315dd62db7389af7ad7c3322afe3d2aca7d7810339ac94b3b98b48e6142a672a7e1f45e863a56be7a8150577528e00c65724
TLSH
T1A4E0F1C03366E47CBCFC5F72034D26484D1E05FA3C4FF84CE8142C5404E8690890D2B4
MD5 SHA1 SHA512 TLSH

Submit Download

is-SN2HA.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-SN2HA.tmp
Size 221B
SHA256 b669f14aef641dbc73d88daf7986aef96b743fcb6dd7ac60b2f7b31dd725e7e7
MD5 0d832b060def60c7474a61fa3f38cf88
SHA1 10129392b5247f78a3d36bd20cf09cecbefe1a09
SHA512 a0e442074a67c0f4ce68535c406d48f0c0543b2536a81334238fc6ae49894a39f8f7f092e1cf8e71b0dbf10d36b191f8f84543684dd8a829cffd161a2d098b61
TLSH
T12AD023591BCDFD055DCD508950E905681D431BCD1314709D7655DD5DCCC43ED214556E
MD5 SHA1 SHA512 TLSH

Submit Download

is-T40K0.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-T40K0.tmp
Size 67B
SHA256 1b47eaf5d81e10c5a36c82f49e587ffbd6f5c5b066d5eefb6f5cbdf84455d99f
MD5 c1d3840ac01bd3fa1099be99be57ab4e
SHA1 728a593b736faac2a3176c32dd1c54acd02bf869
SHA512 269fde7c9872693adcd8ee442f6c425a8439956252b04fb4524efba42f3f7437aeaccea40cefef81617a8428cf2a7341d86612608af1374b6091dda9ef40f715
TLSH
T1D5A002089ADDC03F4965AA3E859851DE84627156651E7D45DE6F0C0440094A91B0717E
MD5 SHA1 SHA512 TLSH

Submit Download

is-TOU5J.tmp

Path C:\Program Files\Karing\data\flutter_assets\assets\datas\geosite\is-TOU5J.tmp
Size 50B
SHA256 9012b1d80030d0559328df4b3467644ff7b6986fd65d400b493f58c2c3c1f857
MD5 29c14625e3b2286cab80b38a22e66499
SHA1 e694e9db13f6bbab11e3517e65d8c538c8cc6211
SHA512 fb2bd84bf8bc49605090276f76e3361fd6fd287f98e6a9f0158f923404c141a3d8c55528b8c03eafd3972951842a038a854ce59ea33c95cc5806d290378680f5
TLSH
T114900249A5B4516797105A1A4140475E653D41F74B4A091AB2056084C52504800D9905
MD5 SHA1 SHA512 TLSH

Submit Download

country_mf.svg

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\countries\country_mf.svg
Size 270B
SHA256 6c83e2a98f71860e893285ff6e9a56787db82947a588127b9179355b5833efc1
MD5 6622f6eb070e15e2d32cc0e39ad02c3a
SHA1 c29c48795c085de674b218108982e3a1fcc8cb98
SHA512 30b69a8b9a65b8022b10873ff5091e9ee933ff4992f69f1d5ee4260ec6f2da9eef0bf8c07acfb1d37cd963868d509a8440b19b14428314a49ec543e28a7af549
TLSH
T129D02B8DD0BDF0C448138B707FDE31C141956326364500DAB147662861CC3EF7E40F04
MD5 SHA1 SHA512 TLSH

Submit Download

is-41AR6.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-41AR6.tmp
Size 269B
SHA256 9a45cbde89e4b4a02884ecdea2e421eb89591c928b650ea55cdfaa351e53b583
MD5 9d040f51256bfb1ee7e7b6acfaee033d
SHA1 1adb12440b8fbe59cc16bbacb96e1375e01b4ce7
SHA512 6914a8560b9541129b265f40c79b6d1c73a49eeed09939e0bf27200d967f12676b7dd5dd24f03730c09bfa7ddd2b1c3d6c5ba2039430ba57bc64282d404eafd4
TLSH
T12ED02BCD507FF4C59C1386607E9972D1105A1B69318900CAF247A72861C8BDF7F00F04
MD5 SHA1 SHA512 TLSH

Submit Download

is-4R3TS.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-4R3TS.tmp
Size 2KB
SHA256 8289e1165205f2e74362fc37c51bdf987582ab7a3048a9241538a2dc7e04dc2b
MD5 b191186dca194ffc042a8fefea96dc9e
SHA1 727362e9dcdac5c291898ba3c9574875e6d82b3c
SHA512 ee9ba71a85010f026be99fa3e3a981850bee5961ef1010de03802bc3fd62a3102a1ad7d0d192e9e29c8dd65d66d31c78f0cd982941bd58f7f34f878cfa362193
TLSH
T1844123C65330B3C8E8DBC6959F7AFCD1A44194EC84BD44D197A6C6046DAF7CE6604E90
MD5 SHA1 SHA512 TLSH

Submit Download

is-8907U.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-8907U.tmp
Size 459B
SHA256 5ed09ced19ea3e2f186227ddb75bf9966a2400a2e7dec318bf97733711ebe226
MD5 cdddd03984542bb13fa34e1e0d9a5e52
SHA1 13f1059dd72650ca085f030cd1021d70ead2df05
SHA512 3e30cd30aacfcb2712079a61ba1b827e55d057b219554086c390804f5ec7d2730fa69923080c5ae1d6972465f7f80433f6d9fbef6cd5845781d3b6bd3735f241
TLSH
T1AEF09EDFD0F9D6C58CC686E87E1972D425650568288090C1F1516150BCCE7CBAB01D24
MD5 SHA1 SHA512 TLSH

Submit Download

is-ACDDO.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-ACDDO.tmp
Size 230B
SHA256 9b0b6e9cf356010a43ad4854b211d3a0783793d506935b7b078e0299e8783040
MD5 9e7172b2a31c46b023500c63fc3729d7
SHA1 44707e1f7da740e302241ee76d0df1973003ee98
SHA512 ddf20e209b83bd93269fe7f9b6eb3aff52a17b5dd7f8ca13e5a69056d5b44ab890231ddb706ae5bae7aa585a0a19aeea4201bd16ff045b8e6392b0f6eae01a23
TLSH
T109D0A78DC2B6E0C24D10C7A07DBD33C0759A225620C454DBF283972495C76EE2646B24
MD5 SHA1 SHA512 TLSH

Submit Download

is-AGME0.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-AGME0.tmp
Size 1KB
SHA256 68ddd4784f30a9e63f992ffd290c34739c38d8e40e3e027386926f69fe07d035
MD5 7467eb669a4dc229c0e28f1a4f8207e9
SHA1 6cd87188bac659ba81dda81bc9ab305c7ca22bec
SHA512 ee0483fcc9dbc56b21cbcb0d0522afa8efc6a526ce8835fd8e30df83d4759643f4deb35cb1366a056b46cf7af6a2c8a0f8b97f20730b9988da339c1578217a6f
TLSH
T1B24134CD0770E1C1BA83C7893F69ECC4511BE1AE5EB242CBAACF175C5C85BD47505884
MD5 SHA1 SHA512 TLSH

Submit Download

is-ES81H.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-ES81H.tmp
Size 607B
SHA256 37629481896f433e317f83009330e625c8e25f0c8301d5b9254ed1ffca3f9022
MD5 bbede675c1d5f9d65c3907efab54f650
SHA1 7ced58a1ebb481842b1cdca99f11130b6f36ecb9
SHA512 1b96d5a688925ede4ac5f8d900272b8b50ac89a6b113e2331c8e03a8747b3c211d32007af486d3330b3eb82edb95a1a6bba71a0b933ee32d7b9545aa3b0aee2f
TLSH
T1BCF0ACCDB3B9BA005C5F93718FFD39C1808164ED258885C8702E9621558B3CFBC88940
MD5 SHA1 SHA512 TLSH

Submit Download

is-ETT27.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-ETT27.tmp
Size 720B
SHA256 c2a76f17771119cdf140fb7de53b1538c39f3e8a79a467ba0144f6e5a0cd2cc6
MD5 19cba396ed43a1de9082f4d50125ea91
SHA1 24e75ee2bc6a0f38a4d1bc63ca7a5f637b12cd66
SHA512 161f930dda09e7dfbbfa6ff09eb9e885eaac7df822ff63f4abd9b18635eedef5982b2cfaa02552bc8ff7ab783f39b947334cbefd34e18663a82ec1dad74ec2f0
TLSH
T17601658C05214B88FEF803A4EB3308B1EF0F50538BAD11DCD2155B50BC55A89D7C0C56
MD5 SHA1 SHA512 TLSH

Submit Download

is-HK8I1.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-HK8I1.tmp
Size 894B
SHA256 5228129d8ab22ad9631a5c1566abdda461a5f3bae528c25299caa22d1b8954f3
MD5 820a15eec6eb60b31bf366c122466e86
SHA1 2bcaabc1d379f4c47d0a6a8b5f9c6da49abe3483
SHA512 c1e89f4a34700c650590e8836e51676d57f0a4b312666a5d6f5b85d5adb29eb3332ff0d316f3467fed67adbe1a339517fc273a218d514902636b752d2aca012d
TLSH
T1A111E3C9137578C99CE6CDE2AF2B70D5794AA2255DD101C13105D88C6AE32CC790EA44
MD5 SHA1 SHA512 TLSH

Submit Download

is-HTCNQ.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-HTCNQ.tmp
Size 629B
SHA256 1b0949b338ba7dd064b4cd8718aa9d4a3a5c47d92621f587c45a611e78d3ffb9
MD5 1c163ac51e82319bb6505f20bd1bf187
SHA1 a9ef15493ae8a02efc075cb0f4a09f4c156f1230
SHA512 4736fd6507fc313d29187ef4fc38ad69a8b75025d493133a5891da43fe76322bb6d1c336e10a81759f616007c67d9be20712a693c5d741106025cc323100dcf5
TLSH
T11EF049C5747CB08388098B746D6EB0E6409E721B554850DD70079A28A3AA3DF7A82F6C
MD5 SHA1 SHA512 TLSH

Submit Download

is-JCNPR.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-JCNPR.tmp
Size 696B
SHA256 c8f01850ab8f68dd58a4d3574a61010a99ca0c011159ac7ad089ea459be1a7d9
MD5 1a57e8a701d8aec418803b82e0d839e9
SHA1 f4a27f470f60e49f99d90f052fd80710ecb6b428
SHA512 4b848f75cceb4a4ee5ace1e55db6678169718d2cbb9dc7fa9994088f6964aaefed6e425805c1c1763147c02c949415255e2d47dc353ad3509a246cdc8ebe106f
TLSH
T1CD01CB8DC138E2C845CCC9A8BF4575EA141AB27A80F130C1A4C7BA58600BCFCF64AA2C
MD5 SHA1 SHA512 TLSH

Submit Download

is-JFNJ6.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-JFNJ6.tmp
Size 1KB
SHA256 0b9c71e7c11c83fccbb8907855b6e258950cc09a8e1955375776c38ef083cf8a
MD5 682c97fa5fc9fdccc259c7d6911dcd8a
SHA1 25f75400fe54e89f3623f1b45f57abe0a3c7f669
SHA512 bdcffeb6b724a511254b00ab0c9ee3cbba45722df4a37ba2e0501666d455fcf3f004ef9264315ae7fc81e8a42d969730240d91820be0ec1c44c4d32d18105eff
TLSH
T15C31F2CDD6E1E7C0DC81D25A2F397CC6510168BA99EB20C564BBC95432D76CCBB49E44
MD5 SHA1 SHA512 TLSH

Submit Download

is-KCMJS.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-KCMJS.tmp
Size 2KB
SHA256 87db302a5714535c7cfa0d7b3641778145098265c47c55ca938db734c215a5d6
MD5 b159d310b53071edc531bc35efe6d671
SHA1 2aee324fd4e52b515e7171bf7f02bdd6347747b0
SHA512 2de2345c6c539903548d9a52492a8488c680ff7223ca50be1ea813e760f0075a3f6f3923909af949c21181b834e73bc70d5b51d1c2b9a75682a1ce594ca5af66
TLSH
T1D54101C35274E3D45CC65378FFAEB0729006B6ED086A64C924E70264619F7CEBB5C689
MD5 SHA1 SHA512 TLSH

Submit Download

is-KO7NI.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-KO7NI.tmp
Size 2KB
SHA256 cadf7c9c3e6c29ff2e25bde8477af3bf3dbcf54ac40d0f44257389f408edc246
MD5 9b39eb0235f458541d0cde8963890b51
SHA1 3f7eda607bd73b733d4058beb5a79b9c03f2237b
SHA512 3932efda65ede063d59b83a9779d9b67a42fa99b08b33de50e1722911d34177993451f4a7dea28cc642959f6c83f0889b5aab205d0960e5d031a147cbda89494
TLSH
T1D55110C5C5B3D38C870D92F61BFB591C01910C5668FA8AB3DACD8F226312280AB4F65F
MD5 SHA1 SHA512 TLSH

Submit Download

is-ORUOT.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-ORUOT.tmp
Size 2KB
SHA256 6a93f8f3398fa8d4bb79de7dd80c387a11e25740f782d5630855b7c6ce3f7241
MD5 8d71d4321b8428ef7140dab32ad149f3
SHA1 3d75862b963cd6794bc39a04468cad17bf794167
SHA512 b6c6d83e81f1dfbcbd5d9af01abdbe6ec0aebd6320681046966c7c86a1bcc8a1fe527ac8ebb5889793fa952ab50344ee2f9a041693ab7a127385d84e8078a75a
TLSH
T1F74167A9717DF8CD9B01C6FDA63BB9F1B00F50496B12D3A9B55B0F0A441A4FBB0056E0
MD5 SHA1 SHA512 TLSH

Submit Download

is-V2GGI.tmp

Path C:\Program Files\Karing\data\flutter_assets\packages\dash_flags\assets\svgs\flags\languages\is-V2GGI.tmp
Size 271B
SHA256 4c3bab9d23f737e3dc4f5dbf8a313a333295cfce10684ced5b4a29266df22183
MD5 895d3136ed8e9ca1bbf26876209d5bee
SHA1 fdc52e22934f7e0d0fe2479d7922ed95c63dfda4
SHA512 80345770ffea1d05c0f1b01b5461fed6966b92099605d290c193af24926b6954a3019871dcbba67d97d1c038798a0246b8a077ad4d877598da10cb694d0306e6
TLSH
T14ED0C28881F6E4C14D21C3E03DBC73C1759522592184109AF1425724A98E2EE7A45A24
MD5 SHA1 SHA512 TLSH

Submit Download

file_selector_windows_plugin.dll

Path C:\Program Files\Karing\file_selector_windows_plugin.dll
Size 107KB
SHA256 4dfefc3330ba475aa9a14fb9b751a99afde7730353af706cab7d4d10dd749084
MD5 e1bba2194cef9f538935de1e4c227fd6
SHA1 d0bef0237e0431fc699c169ab8dea5da50cf3dbf
SHA512 177d730a14ab051eb36a8e589469e8c9a4bb85b207ab20a2edb924d4fd4ede6e64bbff4cc584dfb5d3a30893295ad2ce7f2dcbef2974d23eb887e96e55483820
SSDEEP 1536:RvuKEJSYCSPlYG00diHzPviZ7c8XfEJdeMfZGUBg+9I:9NEJ900OLviZ7c8XfEJdeMfZGUBg+9
TLSH
T190B31C2BFA2C407ED22AE4BCC9435D01CB72F88557A1A7CF67900EDA0E57AE45E3E511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_inappwebview_windows_plugin.dll

Path C:\Program Files\Karing\flutter_inappwebview_windows_plugin.dll
Size 1.1MB
SHA256 5ff1895b9561fa74254e35767d63aafdd8ac25238980a55535eb8be4cab068e8
MD5 4f539405b6b1b60bf87a1194fc1f174e
SHA1 bd8c49494b8f515409639b3ecbf179df77f8fd95
SHA512 baa7653cfd945bb8ba07d9aa32ebedc01ba161d4ada3efa8c2c352cb59be5c9b840bc183e84a7757cd4b79ae64629a0a6ea17b88d370dbf0989b36c1d27540ad
SSDEEP 24576:OEzNeJp47jFpVZ5rwntmQr+pTe2+/4i0+3DTMpZGkZU5Zf:OEz175XQ6plLeMpZG0AZf
TLSH
T120455D26BA5840ACD07AC1FC8EBB4E46D3B2749613715BCB1AD09B5B2F57BE44C3DA10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_local_notifications_windows.dll

Path C:\Program Files\Karing\flutter_local_notifications_windows.dll
Size 88KB
SHA256 9f1a113333e02ee04737aec15edb55383be8cc3f642ed1baf385f794c9316337
MD5 be7f6d5a46be58e31bfd389b9bb0f4e8
SHA1 a02049250b6cebdb02a0b6bbcac6569ab0e65281
SHA512 8a8b97f6c948d86b15b2d93171ecfca4af73dc213edd7bd1b897b5b0e3b15038638e05184baa3a4a1c96da770669099a3f22b880a8084527646e42bc0e719d4e
SSDEEP 1536:U+OZVK4eGlHvSWCUB+VWijYsFQ/xA+8hNj0kX3ez3qJnFkSJVE0kWz9:U+OZVQGlwUWWij1e/xA+6tX3eaz
TLSH
T17F935C57F56A51BAD32AC5B8C8470D42CB727C9647A0A3CF67814EDA0E32BD49F3B601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_secure_storage_windows_plugin.dll

Path C:\Program Files\Karing\flutter_secure_storage_windows_plugin.dll
Size 155KB
SHA256 3526259a5966605500c836bf54aff5600106f44ae1abd29ac20305b0e850b338
MD5 991a49bc312744d5646c1681f8fa1d18
SHA1 6ead0664928361fe97b38b4c52886eadf93dc206
SHA512 16fa5bbf9f0f8bcbd76110657bfeb14b81b41c7f000b3dd13011baee49abed4ef4e3b717d39046444088363e22f43be06b22954b75b0e231decb8275be61fbaa
SSDEEP 3072:hk23pfSNa/fi/ag1lYdRNQyBMAWrd4NenN8II:hZpqNgi/aiyBMAm4Nena
TLSH
T1A7F33B27B769006ED267D1F8CA534E06E772BC91436263CF57908ABA0F17BD46E3E600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

flutter_windows.dll

Path C:\Program Files\Karing\flutter_windows.dll
Size 19.8MB
SHA256 c0304beba5fe98477177e151c673adad98d0442f50efa25d03ff5f207cc21056
MD5 d58a8db7631d3577b3cc9abe14cce466
SHA1 c42e1571ddb6191789331f3db60783cc8a539b78
SHA512 89bdff0faa6ea9f3d89a8bde8e381f82996931f22fc695d1c26e28fac59eff9428ca8e65461373337035233fc4e732c8643b2460290af5393d63e643e626955e
SSDEEP 98304:QPe71P0UiyfxPUBJt4D5hrwgRk244TtFkJp7KYx8m3aIw3v8sDM0p1Vw3/tJjkad:Q+CYrwgRPLYFUZw3vjRfIS5XQe8I
TLSH
T1C9276B03F29640EDC459E178971BAA23F671B8490720BADF27584B223F66FE05B3E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hotkey_manager_windows_plugin.dll

Path C:\Program Files\Karing\hotkey_manager_windows_plugin.dll
Size 104KB
SHA256 e73fd6b8e681061fea4bfaa0ce8e226174c378e5f0cb35a7845eb9089a2d3f39
MD5 70480cf3b56de9865317bbcd91c96b6c
SHA1 cf9231b277d198f54de1b8bd912574a66f47869a
SHA512 2473472ea0d9ee8dfbdf70ca31133b83f7c85ab9b47e1e1b41993a6a7e16f3f57f6827fe8b221731794b8ae0125c13c7d99952655607123d07af5575ae9ea8ec
SSDEEP 1536:7LelBKOuskSN4YM7qikwiKaqp5kMuOOYSie4l/:7LktBSqifiKaqpyMuOOYSie6/
TLSH
T195A30B2AEB6940AFE22AD4B8C9574D46CB71F8861BA167CF57500ADF0F17EE40E3E501
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

karing.exe

Path C:\Program Files\Karing\karing.exe
Size 620KB
SHA256 bd97ad35653b3bf0f6a142237fb96804923ee02e70c216621d67224db8c2815b
MD5 36540e38aec214bfd1eafd31d4e2ffe7
SHA1 eff8d70781b9e816b8d36067c8e330f631cbcc37
SHA512 9c7698f2ccee7e5253d8d9207044a296269933529d2eac2dc2fb0cd08cd0bbdc5735ddcb89adcb5f70971a9a4da3bcc2bd119ba002c7b1f0596ab3fc82b4521a
SSDEEP 12288:U7icTN7RCJMoo0Vdy1lAydtCmOJ/sUvdeOcR0/+Db:oiiCJMQ4tCmOJ/sUv/Oym
TLSH
T1F0D4F789D648246CEA2B507F41A35D46F912FC0C43C768D7038DB9EA06779EA3AF7163
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Program Files\Karing\msvcp140.dll
Size 562KB
SHA256 9057d39b36b6c7d054865ee2bf9cde7a490fe3b01ec4e82514687e24f576269f
MD5 cfdf6eaf5328fecbdec268b7f9e21f3a
SHA1 100c8a08de6544b8554a542ad55af831f86565e7
SHA512 a81feb56ae3e4939abb21597f4f60429b704e04e6c20fac402a0518fe7b29606bf8824347a7570d98f3c44684c15bf6b520e350321bfc2a42ec5597989215782
SSDEEP 12288:N9W8APqgSqvJP85TAv/kLRNKjxDJN7e12QEKZm+jWodEEVx7/:NPW9ILRwjxD62QEKZm+jWodEEb7/
TLSH
T1ABC40823B74D05E0E195E3B8A1878306D7F1BC4A8312A3C792EAD69D2F577D1673B290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

open_dir_windows_plugin.dll

Path C:\Program Files\Karing\open_dir_windows_plugin.dll
Size 82KB
SHA256 7da55249d8f903304281a926856cd1665443a5d49b7a67ae0a3624d9e35ec823
MD5 5541cc7597dc43d5f8bed8861e0a5705
SHA1 617b1b3a759475ddcc3bbfb96aa181b0c38c7ff8
SHA512 3a32e97104ba9b4ddb1af60fefd1d6cfdb4936fc74e03c0ff33f67faaf2e6552b1767b0829bc5a21c98095abe5b0ef4a4f33feafdb787074a1d95099b8e0f6c0
SSDEEP 1536:Dp/eK2Ud2iBECvIyF5lq6Y50M811V8qjHl:QUd2iBftlNdM811V8qB
TLSH
T13A830A2AEA19406FE25AD8F8C9534D05CB72FC8647A167CF67900EDB0F57AE50E3E601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocol_handler_plugin.dll

Path C:\Program Files\Karing\protocol_handler_plugin.dll
Size 95KB
SHA256 fa46d5ee0af5ee98102e7f4c327e759065a121185d27d5d4f284410da7aac4e6
MD5 06de71903a224473b5cfe62e8709bc46
SHA1 d76254487250d6260d42505d4a3364ac54111de8
SHA512 863088073e154576fc6aa0af486556a99d80d1bd39db5e450a568d36ed28295bb4f940ab2aa54c87bdd0c9b1064b7a955e0137a88098e7dbec1792b4e4f65fd3
SSDEEP 1536:6n5pYnPu4mnnRGiZ8CuyERy02l/ZMbhh83Hr0dF8MpZJ+C+MOjw:YeiRGigRy0xv87AF8MpZJ+C+MOj
TLSH
T1EFA31A2AFA19409FE21AD4B8CA574D05CB72FC8647A1A7CF67904EDB0F17AE40E3E511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

screen_capturer_windows_plugin.dll

Path C:\Program Files\Karing\screen_capturer_windows_plugin.dll
Size 102KB
SHA256 aa3a490e11a2dc675822ec6ea8e4ce7d109d64fac6712e3c818ae1b6b78bfee3
MD5 638f63f6fc32359862fa7f869d3bb10d
SHA1 4a4a4fbba39077da368f922b9e4e0af72bf70b8e
SHA512 dd4ac6dd44e4dff159e68922aaf8141a14c293f3ee84e2708e5105dfce0525d4fc7ef7e5419c47feec04d1dfd72331970b9a681a120aad3c7585039830a0d362
SSDEEP 768:azJJHf+cRGC2o+IOdeoNOCL5iYVQWC80KFqwxqriLiuOnq3lS6uZSERCodFM8qDF:ed2IOdxtiTWArHZqkNr/M8qo4W/tp4t
TLSH
T185A31937EB2940AEE22AD5F8CA434906DBB1BC91076167CF67904ADA0F17BD41F3E611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

screen_retriever_windows_plugin.dll

Path C:\Program Files\Karing\screen_retriever_windows_plugin.dll
Size 118KB
SHA256 43653fb55adfea04a51093448ca02a90ef3fc7c3bd58cac1fccb3bc41fb4dff2
MD5 68ab6f1ef7bbbab34bcf6888328134f1
SHA1 5ac0b743e5b710e3e8390b1cd2d22eb8212f1fe1
SHA512 043bdd84a849986170845ea297942c433e6230d0b4547881f4a005ba42bc983538c1cfdf25441f2cd3afa894d307b86dbabf0dfe94a3a47e8542396f8b036ef5
SSDEEP 1536:re/Z1HTAqi+9TEGmGiJhSz020YPw8eGcnWqkgn/Mp+eCg/THB6KD0:xBGiU020TWqkgn/Mp+eCg/THIKD
TLSH
T1C3C31A2BF75940AFE11AD8B8CA574D42CBB2F8954B9167CF17900ADA0F17AE85F3E500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sentry.dll

Path C:\Program Files\Karing\sentry.dll
Size 359KB
SHA256 52084c13856731c96a259a199b5d923493819ddc265ec1fc8ae9c1b76fe09e80
MD5 8ade42902ac33d9bc28757ef195f9c17
SHA1 a67f789fe29ed7f061b95ad141f676a522f66355
SHA512 b6f52dabfebb996b28d397f27d518e4872c2c0608ce1962f1107e11e0db35c57d45e97a597dc0ff33aff9dd374b6d7aa3721a76d07567155d4dd5b6499884edc
SSDEEP 6144:7dpS4tlE028N6kykRJUBCBnGHIGO/oaUWeCqsaaU7CWYz:7d8z0288kykRqBCBGHIGO/uWeCqsaaUG
TLSH
T1F8745B6DB76810B8E177C2BCC5D39907D3B27849037297CF17A04B962F179D9A63AB01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

share_plus_plugin.dll

Path C:\Program Files\Karing\share_plus_plugin.dll
Size 131KB
SHA256 e8a8cfe489cf2b81681766ce1cabc186b9b62c2f3dca8a75a8ba2f2ffc721093
MD5 48cbcb5cdabb02426068cabf45b62e9a
SHA1 a9bb1ca7f45434eff96dfa9f635d00f8816394bc
SHA512 6e563b213d3cef167a81e80dc72e4952f299c4ae6c5bdbaf4cdee180180538ac6592d5287a2bd29ca06375c02efa44064349c89277873c1c5f9e84d3eef3af2f
SSDEEP 3072:U7W/gDrdi50fI6tt3ehhhhhhhh2hhhhhhhhghhhhhhhhhhhhhhhShhhWhhhmhhhb:UacBi59MfT4FQ7
TLSH
T1BBD31A27BA2C819FD12AA4B889478E49D772F8925F6183CB77500B5F4E277D80E3E611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite3_flutter_libs_plugin.dll

Path C:\Program Files\Karing\sqlite3_flutter_libs_plugin.dll
Size 9KB
SHA256 da4cf17412ab9cd9c9610dc34d4fef2c78104da04456eb06e6780f4276e33f77
MD5 70fea29c41a1004f34aa9f00e4e036df
SHA1 cf50a75b313f1374db85381e8f6b470f324fad6d
SHA512 b43ea167011118dcf94e01dbdbcc2de0abc8f8e73f0fcbe8ba52f351b96941e40f2e2c821ec60879f9e43413ce7b13a0be9afb07cc17631e7f12a3d5379bd012
SSDEEP 96:EaZSQkd8fKq5Vl6NlFSQF0ZhPB/KXil+bDLbLnt4UGMMHpo/nl+sBMo9u99Jx:EnWfKqlg2J/PUDLt4UGMypo/nRj9a
TLSH
T1B0122AC5FEA449D5F269C278C91B4E4CB1B9FF206A9123C72370522F1E1738AA17A651
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tray_manager_plugin.dll

Path C:\Program Files\Karing\tray_manager_plugin.dll
Size 104KB
SHA256 ecd882fc9eaa6cdf148a1081a8d77fa602b58b8626599f6503a1ba83c5279a5a
MD5 c6aa09e51ac762ae7bf865849351bd50
SHA1 d4dbb66439d0aa16016ee3ab13c15a7a96ac13e4
SHA512 9c92aec786b4ba34c7aeec48f9d819913e1c50d8328e67c582b6d157549661b1a88306a5d7e3e66349a9c74cab318aab704a012d97d6f981490d2dd2b732b064
SSDEEP 1536:+4TU/xhrxxwzYrGiYHe3WXMJymPQ3w0hvpZJHCgijF:+qK3rGiJ3WXMJymPQ3w0hvpZJHCgij
TLSH
T107A32B2AEA29406EE22AD4F8C9534D46CF71F8864761A7CF57800ADF0F27AE41F3E511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

url_launcher_windows_plugin.dll

Path C:\Program Files\Karing\url_launcher_windows_plugin.dll
Size 96KB
SHA256 a886a6178d88777362accdec4280fe92901acc2167ab330ca2f5d6c6b494b173
MD5 bf4d1e5bba67fa4f1e8b567e8e95c911
SHA1 a47a30ad00cf0c8889238704b8838396f75c21d6
SHA512 b11dbc978e58d7605d11956f9afa61019fc872f3e1206b8847c2faf91ea849c076c5a9d12dcb0c9d0263a6ad3b6d78ffaa6b764343a04df9da82daff2cd23cb6
SSDEEP 1536:3r36dNOAHDANtjzhJEiPtp41vqrlGfM8xV1J3Jj2:aNOAHDAb1JEi1p/GfM8xV1J3Jy
TLSH
T11CA3092AEB29406BE21AD4BCCA574D01CB72FCC5476167CB27A05EDB0E5BBD91E3E101
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Program Files\Karing\vcruntime140.dll
Size 117KB
SHA256 da72e6677bd1bcd01c453c1998aaa19aeaf6659f4774cf6848409da8232a95b2
MD5 943fc74c2e39fe803d828ccfa7e62409
SHA1 4e55d591111316027ae4402dfdfcf8815d541727
SHA512 96e9f32e89aee6faea6e5a3edc411f467f13b35ee42dd6f071723daeba57f611dbd4ff2735be26bb94223b5ec4ee1dffedf8dc744b936c32a27d17b471e37dcf
SSDEEP 1536:R9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaWEoecbdhUoTtHez9FazR:REnsvReGsWyxLizXFCecbd1Tt+i1
TLSH
T168C37C8572A002FBD17AC274C1A36A17FB75B94487A0A7CF03B58A660F53BE09E3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Program Files\Karing\vcruntime140_1.dll
Size 48KB
SHA256 26e470b29bed3d873e0c328186e53f95e9edbfe0b0fd0cda44743a0b1a04a828
MD5 05052be2c36166ff9646d7d00bb7413f
SHA1 d8d7c4b322d76e3a7b591024c62f15934979fe40
SHA512 0460cc66d06df9a2941607473f3eccfd909f2adab53a3328fadcedd1b194b388eca738c2c6c2e193de33606925fbed1fe39efa160015128e93f5e3a03c62170d
SSDEEP 768:qzzO6ujT3MbR3v0Cz6SKLq83yN+iRxw9zv6JmEpw9zF:3q/o1j3c+iIzv6JmEp4zF
TLSH
T181236B9417784482D4AB99B0C0DBEF577D7CF6964750A28F0BA0D1981F237D0EB3D21A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vpn_service_plugin.dll

Path C:\Program Files\Karing\vpn_service_plugin.dll
Size 103KB
SHA256 1687a62974c23e7e03625b0fe67e2c41e9a884360f002ea1bcfcf803a5388ca0
MD5 7451a07942fd361a082480b7dfd9f29b
SHA1 13dc4edfa5260d26a5815db5ae51bd4dfa93d5bc
SHA512 9a805cdaa24f99352f220ef21ea5c4e76876c175e30eeeeca7a49679d803176ac245d9541a5d95cce0a831322b7c7bbd8762b12bb72efea6b0d28497a232c2f5
SSDEEP 3072:dvmpckb2Be+5+6xizK9kkvDiM8jCvty3:dupckb2I+5ViziXiM8jCvty
TLSH
T10DA33C2BBA2D406FE269D5BCCA574902CB72B8C6076197CF17400EDB0E27AE45F3E611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

window_manager_plugin.dll

Path C:\Program Files\Karing\window_manager_plugin.dll
Size 128KB
SHA256 2b925362457c68320caaac74bf6d24c839f7c09e0c9e942a80a54602caf5e2ce
MD5 c80cb55032519f01ee767df4e599ceff
SHA1 90560662aec1c222261790a681c64115c12705f9
SHA512 a059cf2a19cf18405d946d6fccd2da44a82abb733ab278c162a117328d347dfe7670d04b12e2024dbd79ac9b3dbffd1ebbaf75ff07de78cdbc972f1d67e01bbb
SSDEEP 3072:ApxceRvNDQRyi+Z1sWXhapRzvpZJHLTA/6aqlUv:AplRvNDQYi+vPhapRzvpZJHLT26fSv
TLSH
T1F2D34C26F66C40AEE12AE4F8C9835906CB72B8854761A7CF17904EDB0F27BE55E3F501
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

windows_single_instance_plugin.dll

Path C:\Program Files\Karing\windows_single_instance_plugin.dll
Size 81KB
SHA256 2afccb5943017325092775a18e57ef1d064a7174e737b012a2d87256093803ec
MD5 99dd90b6620eeee57da60263607fd00d
SHA1 1d698751430a6e04bc7fbdcf9796558c5484634c
SHA512 a4fd760f6f9139cf0b690151294cf68f8b6248ce1db5d3524079422c361e567bcd8f5703d3a65ee4bd2db0758f7b98a237a294677cd35f04612d7d98bea611d7
SSDEEP 1536:01MhxCRQ6i2de13OQDnG41C7rStcBvAq1/8lFmK:0qkS6id55EGtqvAq1/8l8
TLSH
T133830A26EA2940AFE219D8B8CA535D05CB72FC8647A1A7CF67500EDB0F17AE41F3E511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

karing_1.2.18.2102_windows_x64.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-QBUBD.tmp\karing_1.2.18.2102_windows_x64.tmp
Size 3.6MB
SHA256 0b7f91b372d9e419f243b225597053e3bf7373bb2b2aad06c35d50911fd3c3f7
MD5 ba05cf160f3c725e6c443edfe0f3d8fb
SHA1 236e1981365d0cef44987ee5485455c99d8ce6e9
SHA512 6b1bcb14b8fe41aca56a486758b3db4e30052adbcefae86ec44ac66f94a916e1001810f0ac6d143bc6deaf9aac7af4729e6e5b48741a04840b88bd21c5bdf3fa
SSDEEP 49152:e6RlZSDcbZsSNFZnpZv4sxNhdaodRl4FHKBC6333uv:e6RHzbv4sxNhnrl5Bz333g
TLSH
T13E065B13F389603ED05B1A3A39279645683FBA2079568C5697EC3E8C4F752C22E3B747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1180-7-0x0000000000CE0000-0x0000000000DE8000-memory.dmp

Download

memory/1180-5716-0x0000000000CE0000-0x0000000000DE8000-memory.dmp

Download

memory/1180-0-0x0000000000CE0000-0x0000000000DE8000-memory.dmp

Download

memory/2784-5-0x0000000002E40000-0x0000000002E41000-memory.dmp

Download

memory/2784-5686-0x00000000007A0000-0x0000000000B4A000-memory.dmp

Download

memory/2784-10-0x0000000002E40000-0x0000000002E41000-memory.dmp

Download

memory/2784-128-0x00000000007A0000-0x0000000000B4A000-memory.dmp

Download

memory/2784-8-0x00000000007A0000-0x0000000000B4A000-memory.dmp

Download

memory/2784-5714-0x00000000007A0000-0x0000000000B4A000-memory.dmp

Download

memory/2784-5715-0x00000000014E0000-0x000000000162D000-memory.dmp

Download

memory/2784-12-0x00000000007A0000-0x0000000000B4A000-memory.dmp

Download

memory/2784-9-0x00000000014E0000-0x000000000162D000-memory.dmp

Download